{"id":4944,"date":"2023-12-14T23:36:29","date_gmt":"2023-12-14T15:36:29","guid":{"rendered":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=4944"},"modified":"2023-12-16T23:37:50","modified_gmt":"2023-12-16T15:37:50","slug":"apple-%e7%b7%8a%e6%80%a5%e4%bf%ae%e5%be%a9-2-%e5%80%8b-ios-0-day-%e6%bc%8f%e6%b4%9e","status":"publish","type":"post","link":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=4944","title":{"rendered":"Apple \u7dca\u6025\u4fee\u5fa9 2 \u500b iOS 0-day \u6f0f\u6d1e"},"content":{"rendered":"\n

\u767c\u5e03\u55ae\u4f4d:TWCERT\/CC \u66f4\u65b0\u65e5\u671f:2023-12-14<\/p>\n\n\n\n

Apple \u8fd1\u65e5\u63a8\u51fa\u7dca\u6025\u8cc7\u5b89\u66f4\u65b0\uff0c\u4fee\u5fa9 2 \u500b\u5b58\u65bc iPhone\u3001Pad \u8207 Mac \u8a2d\u5099\u4e2d\u65b0\u767c\u73fe\u7684 2 \u500b 0-day \u6f0f\u6d1e CVE-2023-42916 \u8207 CVE-2023-42917\uff0c\u4f7f\u7528\u8005\u61c9\u7acb\u5373\u5957\u7528\u66f4\u65b0\u3002<\/p>\n\n\n\n

CVE-2023-42916 \u8207 CVE-2023-42917 \u90fd\u662f\u5b58\u65bc WebKit \u700f\u89bd\u5668\u5f15\u64ce\uff0c\u5c6c\u65bc\u8d8a\u754c\u8b80\u53d6\u6f0f\u6d1e\uff1b\u99ed\u4fb5\u8005\u53ef\u5229\u7528\u7279\u88fd\u7684\u7db2\u9801\u4f86\u8a98\u767c\u8a18\u61b6\u9ad4\u5d29\u6f70\uff0c\u85c9\u4ee5\u7aca\u53d6\u4f7f\u7528\u8005\u7684\u6a5f\u654f\u8cc7\u8a0a\uff0c\u751a\u81f3\u57f7\u884c\u4efb\u610f\u7a0b\u5f0f\u78bc\u3002<\/p>\n\n\n\n

Apple \u4e5f\u5728\u5c0d\u5916\u767c\u8868\u7684\u8cc7\u5b89\u66f4\u65b0\u901a\u5831\u4e2d\u6307\u51fa\uff0c\u8a72\u516c\u53f8\u5df2\u7372\u6089\u9019\u5169\u500b\u6f0f\u6d1e\u5df2\u906d\u99ed\u4fb5\u8005\u7528\u65bc\u99ed\u4fb5\u653b\u64ca\u4e4b\u4e2d\u7684\u60c5\u5831\uff1b\u906d\u5230\u653b\u64ca\u7684\u662f\u57f7\u884c iOS 16.7.1 \u5148\u524d\u7248\u672c\u7684 iOS \u8a2d\u5099\u3002<\/p>\n\n\n\n

Apple \u4e5f\u5217\u51fa\u53d7\u5230\u5f71\u97ff\u7684\u5404\u7a2e\u8a2d\u5099\u578b\u865f\uff0c\u53d7\u5f71\u97ff\u88dd\u7f6e\u7bc4\u570d\u76f8\u7576\u5ee3\u6cdb\uff1a<\/p>\n\n\n\n

iPhone Xs \u8207\u5f8c\u7e8c\u6a5f\u578b\uff1b
iPad Pro 12.9 \u540b (\u7b2c 2 \u4ee3) \u8207\u5f8c\u7e8c\u6a5f\u578b\u3001iPad Pro 10.5 \u540b\u3001iPad Pro 11 \u540b (\u7b2c 1 \u4ee3) \u8207\u5f8c\u7e8c\u6a5f\u578b\u3001iPad Air (\u7b2c 3 \u4ee3) \u8207\u5f8c\u7e8c\u6a5f\u578b\u3001iPad (\u7b2c 6 \u4ee3) \u8207\u5f8c\u7e8c\u6a5f\u578b\u3001iPad mini (\u7b2c 5 \u4ee3) \u8207\u5f8c\u7e8c\u6a5f\u578b\uff1b
\u57f7\u884c macOS Montery\u3001Ventura \u8207 Sonoma \u7684\u6240\u6709 Mac \u6a5f\u578b\u3002
Apple \u91dd\u5c0d\u9019\u5169\u500b 0-day \u6f0f\u6d1e\u63a8\u51fa\u7684\u7dca\u6025\u66f4\u65b0\u7248\u672c\u70ba iOS 17.1.2\u3001iPadOS 17.1.2\u3001 macOS Sonoma 14.1.2 \u8207 Safari 17.1.2\uff0c\u4f7f\u7528\u8005\u61c9\u7acb\u5373\u66f4\u65b0\u5230\u6700\u65b0\u7248\u672c\uff0c\u4ee5\u907f\u514d\u99ed\u4fb5\u8005\u5229\u7528\u5df2\u77e5\u6f0f\u6d1e\u767c\u52d5\u653b\u64ca\u5f97\u901e\u3002<\/p>\n\n\n\n

CVE \u7de8\u865f\uff1aCVE-2023-42916 \u8207 CVE-2023-42917<\/p>\n\n\n\n

\u89e3\u6c7a\u65b9\u6848\uff1a\u4f7f\u7528\u8005\u61c9\u7acb\u5373\u66f4\u65b0\u5230\u6700\u65b0\u7248\u672c iOS 17.1.2\u3001iPadOS 17.1.2\u3001 macOS Sonoma 14.1.2 \u8207 Safari 17.1.2\uff0c\u4ee5\u907f\u514d\u99ed\u4fb5\u8005\u5229\u7528\u5df2\u77e5\u6f0f\u6d1e\u767c\u52d5\u653b\u64ca\u5f97\u901e\u3002<\/p>\n\n\n\n

\u8cc7\u6599\u4f86\u6e90\uff1ahttps:\/\/www.twcert.org.tw\/tw\/cp-104-7582-3d8ef-1.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u767c\u5e03\u55ae\u4f4d:TWCERT\/CC \u66f4\u65b0\u65e5\u671f:2023-12-14 Apple \u8fd1\u65e5\u63a8\u51fa\u7dca\u6025\u8cc7\u5b89\u66f4\u65b0\uff0c\u4fee\u5fa9 2 \u500b\u5b58\u65bc iPhone\u3001Pad \u8207 Mac \u8a2d\u5099\u4e2d\u65b0\u767c\u73fe\u7684 2 \u500b 0-da…<\/p>\n","protected":false},"author":9,"featured_media":4945,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[352],"tags":[204],"class_list":["post-4944","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","tag-204"],"gutentor_comment":0,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/aict.nkust.edu.tw\/digitrans\/wp-content\/uploads\/2023\/12\/5832312141422cad75-e1702741059672.png?fit=899%2C674&ssl=1","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/4944","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4944"}],"version-history":[{"count":1,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/4944\/revisions"}],"predecessor-version":[{"id":4946,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/4944\/revisions\/4946"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/media\/4945"}],"wp:attachment":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4944"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4944"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4944"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}